This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/ALLGVKP-5SXjVEpjuKZaujJ3frw.roa File: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (raw, json) Hash identifier: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ= Subject key identifier: 00:B2:C6:54:A3:FE:E5:25:E3:54:4A:63:B8:A6:5A:BA:32:77:7E:BC Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019B7758D9FEC9135DC3D705BAD37D98219A Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/ALLGVKP-5SXjVEpjuKZaujJ3frw.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48254 IP address blocks: 212.78.75.0/24 maxlen: 24 212.78.76.0/23 maxlen: 24 212.78.78.0/24 maxlen: 24 212.78.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:fe:c9:13:5d:c3:d7:05:ba:d3:7d:98:21:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00b2c654a3fee525e3544a63b8a65aba32777ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e7:1e:15:0c:25:43:40:dd:b0:01:1d:39:71: 2a:7b:81:41:da:9d:56:13:be:ab:81:df:2b:4e:05: 96:ab:33:b7:bf:8c:7c:ad:74:e6:85:16:f6:ee:77: 32:75:52:97:73:7e:be:5e:c0:e0:42:c2:0e:b3:6e: 90:f0:9b:f4:28:db:d7:5f:50:03:65:c3:ba:f6:03: 58:b1:de:02:20:bc:d5:e3:bf:4f:40:46:aa:f5:86: a8:b8:02:f6:b7:70:be:0a:e4:4f:62:da:78:c5:ec: 83:18:41:3e:0d:f7:f4:05:15:e6:55:60:9c:1c:87: 45:9b:06:e7:61:d6:85:cc:45:e6:2a:e2:a6:e3:d6: 69:50:e8:f4:6c:6a:38:31:e3:08:f2:6a:cd:6a:31: fc:87:74:1f:73:7b:63:5d:80:ae:09:1b:7d:83:c1: 75:8b:03:0b:0e:eb:a1:ff:7a:47:c7:d3:93:96:66: 94:3f:f0:a8:75:8e:44:35:86:86:6d:f0:3f:9a:7e: 82:48:38:2a:52:b1:76:ae:a8:f0:ab:14:cc:ec:04: de:05:6d:82:53:e8:ea:f4:66:9d:7b:83:6d:f8:74: 2e:c0:7f:d1:83:aa:32:61:dd:54:e1:d9:29:13:93: dd:68:bb:1c:42:ab:0b:25:a0:79:21:92:94:82:05: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B2:C6:54:A3:FE:E5:25:E3:54:4A:63:B8:A6:5A:BA:32:77:7E:BC X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/ALLGVKP-5SXjVEpjuKZaujJ3frw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.75.0-212.78.78.255 212.78.85.0/24 Signature Algorithm: sha256WithRSAEncryption 22:58:1b:9c:f5:c1:f1:69:e3:50:91:c0:5e:56:ac:8f:19:98: 5e:ec:22:75:6c:ee:99:30:6f:71:6f:63:4f:0b:be:73:09:72: e6:dd:18:00:9e:e3:29:cb:92:8c:83:ab:b4:d6:0a:86:4a:c0: 65:48:95:75:90:b3:94:3d:4a:bc:8c:9e:0c:89:cb:94:fd:18: 25:18:0e:8f:08:7b:ef:82:ae:27:ee:d1:8a:6c:ab:98:0b:a9: 94:69:f8:19:33:90:d8:60:b2:0b:a7:8e:cb:74:bd:3e:78:66: 30:f6:d7:0b:90:20:2d:56:a7:71:41:4a:d3:c8:1d:a8:23:e2: 70:06:28:39:f6:eb:ac:e2:66:61:df:9e:56:4f:d2:7d:0d:cd: 60:ab:8d:9b:c1:ef:4d:3e:2f:2a:22:c8:e4:d8:6f:ae:39:2c: b2:77:ec:80:1e:43:b8:9f:4b:12:57:09:74:de:bc:60:60:1a: 78:65:32:cf:53:00:1b:55:b5:63:8c:8f:a8:a7:db:00:99:9c: 63:f0:ac:e6:ff:2c:54:e7:d6:56:10:58:c9:0b:09:bd:ec:71: 1b:74:9b:0a:d6:97:70:42:81:15:0b:90:53:ab:f7:f2:ef:d7: 6e:29:50:e9:4f:f8:7c:92:6e:ce:c7:64:47:ae:c6:86:19:50: 75:e6:9e:7d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WNn+yRNdw9cFutN9mCGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGIyYzY1NGEzZmVlNTI1ZTM1NDRhNjNiOGE2NWFiYTMyNzc3ZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eceFQwlQ0DdsAEdOXEqe4FB2p1W E76rgd8rTgWWqzO3v4x8rXTmhRb27ncydVKXc36+XsDgQsIOs26Q8Jv0KNvXX1AD ZcO69gNYsd4CILzV479PQEaq9YaouAL2t3C+CuRPYtp4xeyDGEE+Dff0BRXmVWCc HIdFmwbnYdaFzEXmKuKm49ZpUOj0bGo4MeMI8mrNajH8h3Qfc3tjXYCuCRt9g8F1 iwMLDuuh/3pHx9OTlmaUP/CodY5ENYaGbfA/mn6CSDgqUrF2rqjwqxTM7ATeBW2C U+jq9Gade4Nt+HQuwH/Rg6oyYd1U4dkpE5PdaLscQqsLJaB5IZKUggUEUQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFACyxlSj/uUl41RKY7imWroyd368MB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvQUxMR1ZLUC01U1hqVkVwanVLWmF1akozZnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADUTksD BADUTk4DBADUTlUwDQYJKoZIhvcNAQELBQADggEBACJYG5z1wfFp41CRwF5WrI8Z mF7sInVs7pkwb3FvY08LvnMJcubdGACe4ynLkoyDq7TWCoZKwGVIlXWQs5Q9SryM ngyJy5T9GCUYDo8Ie++Crifu0Ypsq5gLqZRp+BkzkNhgsgunjst0vT54ZjD21wuQ IC1Wp3FBStPIHagj4nAGKDn266ziZmHfnlZP0n0NzWCrjZvB700+LyoiyOTYb645 LLJ37IAeQ7ifSxJXCXTevGBgGnhlMs9TABtVtWOMj6in2wCZnGPwrOb/LFTn1lYQ WMkLCb3scRt0mwrWl3BCgRULkFOr9/Lv124pUOlP+HySbs7HZEeuxoYZUHXmnn0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:39 2026 by rpki-client